How exposed is your brand?

A typo-squat is a domain registered under a spelling variation of an established brand that users can reach by fat-fingering the URL bar — adjacent-key slips, character doubling, missing letters, transpositions. We also flag homoglyph attacks (Latin characters swapped for Cyrillic/Greek look-alikes that render identically on most fonts) and hyphenation splits.

Most phishing campaigns use pre-registered typo-squat domains held in a dormant state for months before activation. By the time a campaign runs, the attacker already owns the variants. Monitoring lets you register, UDRP, or at least alert on the domains before they're weaponized against your users.

The free checker generates variants for the TLD you select, plus common cousin-TLD swaps where relevant. It does not check availability, ownership, or registration status.

A character from one script that looks identical (or near-identical) to a character in another script. The Cyrillic 'а' (U+0430) renders the same as Latin 'a' in most fonts but registers as a different domain. Attackers exploit this to create domains like 'pаypal.com' that visually read as 'paypal.com' but route to a phishing server.

200-500, depending on the character composition. Longer brands and brands with vowel-heavy clusters produce more. Homoglyph expansion alone can multiply that by 3-10x when you include all script look-alikes. Treat the output as a review list, not as proof that a domain is registered or available.